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Abstract —This paper is concerned with a binary detection 
problem over a non-secure network. To satisfy the communication 
rate constraint and against possible cyber attacks, which are 
modeled as deceptive signals injected to the network, a likelihood 
ratio based (LRB) scheduler is designed in the sensor side to 
smartly select sensor measurements for transmission. By explor¬ 
ing the scheduler, some sensor measurements are successfully 
retrieved from the attacked data at the decision center. We 
show that even under a moderate communication rate constraint 
of secure networks, an optimal LRB scheduler can achieve a 
comparable asymptotic detection performance to the standard 
N-P test using the full set of measurements, and is strictly 
better than the random scheduler. For non-secure networks, 
the LRB scheduler can also maintain the detection functionality 
but suffers graceful performance degradation under different 
attack intensities. Finally, we perform simulations to validate 
our theoretical results. 

Index Terms —Binary detection, cyber attack, sensor scheduler, 
scheduled transmission rate, asymptotic detection performance. 


I. Introduction 

Cyber-Physical Systems (CPS) are intelligent systems which 
are typically networked systems for interactions between phys¬ 
ical processes and computing components. Computation and 
communication capabilities are deeply embedded in CPS to 
help detect, monitor and control physical entities in phys¬ 
ical system remotely in a cooperative way. Examples of 
CPS include intelligent transportation systems, environmental 
monitoring networks, power distribution networks, healthcare 
monitoring systems, wireless sensor networks (WSNs) and etc. 
These applications are generally safety-critical since system 
failures due to malicious cyber attacks can result in disastrous 
breakdown to infrastructures’ functionality and irreversible 
harm to human safety. 

Distributed detection |1| in WSNs plays an important role 
in network monitoring. A typical distributed detection sensing 
system consists of a decision center, a wireless communication 
link and a group of sensor nodes, which are deployed in 
the interested area for data collection. WSNs are usually 
deployed in public or adversarial environment over non-secure 
channels |2), |:3j, under various potential cyber attacks such as 
jamming (4), selective forwarding (5), message manipulation 
[; 6 j, false data injection |7'| and routing attacks [ 8 j]. These 
attacks can induce deceptive false alarms in detection and 
lead to misjudging of the system state changes. For instance. 
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Fig. 1. Distributed detection framework under attack 


an intruder may fabricate an equipment breakdown event in 
a process industry by sending deliberately forged signals to 
the detection center. Considerable economic loss will occur 
if the ongoing production process are terminated due to the 
non-existing equipment breakdown. To protect the system, se¬ 
cure communication mechanisms and technologies are highly 
desired. 

Previous research concerning security issues in WSNs 
mainly focus on information authentication j9j, & key 
encryption ITT), ITT), data aggregation 1 131 , [14|, and secure 
routing p~5|T|16|. These security measures are generally 
designed to defend against malicious attacks by preventing 
deceptive data sent or received by the sensors, controllers 
and actuators, while the survivability under attacks is rarely 
discussed. In practice, however, the defense mechanisms can 
often fail due to various unpredictable problems such as 
human errors, design defects, incorrect operations, and device 
misconfigurations. This indicates that attacks may not be 
resolved even when defense technology is employed in the 
system. As Cardenas et al pointed out in ET it is highly 
desirable that the system proceed to function well or degrade 
gracefully even under attacks. 

In this work, we consider a detection framework in Fig. 
|T] where the system and the remote tester are connected by 
a non-secure network. In particular, an attacker will inject a 
deceptive signal cy into the channel. If the measurement y, 
is directly sent to the tester, the attacker renders it difficult 
for the tester to distinguish from the deceptive signal to make 
a correct decision. To solve it, we propose a communication 
scheduler in the transmitter side whose state is denoted by 
7j. For example, 7* = 0 corresponds to that y, will not be 
transmitted to the tester while 7 , = 1 indicates that y, will be 
sent to the tester. The purpose of such a scheduler is twofold. 
Firstly, the binary-valued 7 , of the scheduler can be securely 
encrypted, and provides critical information for the tester to 
survive the ongoing cyber attack. Secondly, it helps to select 
“useful” measurements for transmission, and discard the rest 
of “non-useful” ones. From this perspective, the scheduler 
reduces the energy consumption for sensors as only a subset 
of the sensor measurements will be transmitted to the tester. 

Observe that the likelihood ratio of sensor measurements 
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is key to the celebrated Neyman-Pearson (N-P) test, which is 
known to be an optimal test for the binary hypothesis testing 
problem under a full set of measurements (DO- This suggests 
that the likelihood ratio might be a good candidate to quantify 
the importance of a sensor measurement. To pursue this idea, 
we propose a likelihood ratio based (LRB) communication 
scheduler for a binary hypothesis testing problem. Specifically, 
only the sensor measurement with its likelihood ratio far from 
one will be useful for the detection problem and sent to the 
tester while the rest are deemed as non-useful. 

Note that the tester will receive the transmitted measure¬ 
ments with the securely encrypted scheduler state 7 , and 
possible deceptive signals. By exploring their relationships, 
the tester can extract certain critical information for detection. 
Without cyber attacks, scheduled transmission rate is intro¬ 
duced in to quantify the reduction of communication 
cost by the scheduler, which is defined as the ratio of the 
number of transmitted measurements to the total number of 
sensor measurements in the average sense. Intuitively, the 
larger the scheduled transmitted rate, the larger the number of 
sensor measurements tends to be transmitted in a fixed time 
interval. Due to possible cyber attacks, a larger transmission 
rate does not always result in a better detection performance 
as it may also reduce the chance for the tester to discriminate 
the transmitted true measurements from the deceptive signals. 
We are therefore interested in the design of an optimal LRB 
scheduler to achieve a good detection performance under 
an appropriate transmission rate. Since the scheduler is a 
nonlinear function of sensor measurements, it is challenging 
to design an (asymptotically) optimal LRB scheduler for 
detection. 

Under a LRB scheduler, which is to be specified later, 
we explicitly derive the rejection regions of the null hy¬ 
pothesis respectively under N-P tests. Due to nonlinearity of 
the scheduler, it is impossible to analytically calculate the 
probabilities of either Type I or II errors. Thus, we resort 
to the asymptotic approach to quantify the effect of the 
scheduler on the detection performance, and obtain optimal 
schedulers. Note that sensor data scheduling has been reported 
in p0)-p4) for detection problems and in p9) , [251—[271 
for state estimation problems, while none of these works 
consider security issues. Besides, they focus on establishing an 
optimal transmission strategy under different scenarios while 
the effect of sensor scheduling mechanism on the detection 
performance remains unexploited. In comparison, we conduct 
an asymptotic analysis as the number of sensor measurements 
tends to infinity. This enables us to clearly quantify how the 
scheduled transmission rate and the potential deceptive data 
degrades the asymptotic detection performance. 

The contribution of this work can be summarized as follows. 
Firstly, inspired by the feature of an N-P test, we propose an 
LRB communication scheduler to reduce the communication 
cost for a binary detection problem, which is shown to be an 
efficient and simple strategy both in theory and simulation. 
Secondly, under a scheduled transmission rate constraint, an 
asymptotically optimal LRB scheduler is designed to achieve 
the fastest exponential convergence of detection error. Thirdly, 
using the scheduler information, we introduce tester signal 


processing protocols to maintain detection functionality even 
when deceptive attack signal are injected in the channel. In 
addition, the degradation of detection performance under a 
certain attack intensity is explicitly quantified in the asymp¬ 
totical sense. 

The remainder of this paper is organized as follows. In 
Section II, we formulate the distributed detection problem 
and propose the LRB scheduler. In Section III, we explicitly 
develop the Neyman-Pearson test and conduct asymptotic 
performance analysis for the LRB scheduler. Section IV in¬ 
troduces signal processing protocols at the tester when cyber 
attack happens. Asymptotic analysis are conducted to exactly 
quantify performance degradation of detection under different 
attack intensities. In Section V, simulation results are included 
to validate our theoretical results. In Section VI, we draw 
some concluding remarks and highlight some future research 
directions. 


II. Problem Formulation 

Distributed detection through WSNs is threatened by po¬ 
tential cyber attacks, but works under friendly communication 
environment in the majority of time. We are particularly 
interested in designing a secure detection system that performs 
well under malicious environment. 

A. Communication Scheduler for Secure Detection 

Consider a scenario that a remote sensor is deployed to 
monitor a phenomenon of physical interest, which is modeled 
as a binary state of the nature. The sensor collects samples 
from the system and transmits them to a decision center 
through a non-secure network. In this paper, the sensing signal 
is given by 

y i =9 + v i ,i = 1,2,..., (1) 

where the system state is represented by a binary-valued 0 £ 
{0o, 0i} C R, and -17 is a white Gaussian noise with variance 
cr 2 . It is obvious that it does not lose generality by letting 
0o < 01- 

The task of the decision center is to discriminate between 
the two states using its received sensing information. To 
this purpose, a tester is implemented to solve the following 
hypothesis testing problem: 

"H 0 : {0 = 0 O } versus 'H 1 :{d = 9i}. (2) 

In statistics, Wq is called the null hypothesis and Hi is the 
alternative hypothesis. Throughout the paper, all the random 
varibles/vectors are defined on a common probability space 
(fi, J- 1 Pg). In contrast to the conventional hypothesis testing 
problem [18), we focus on a distributed framework consisting 
of a communication scheduler, which is embedded in the 
sensor side, a remote tester and a non-secure channel, see Fig. 
|T] for an illustration. In particular, let 7 , = 1 indicate that the 
sensor is triggered to transmit yi to the tester at sampling 
time i and the packet containing the information of y, is 
perfectly delivered to the tester while 7 , = 0 means that there 
is no data transmission between the sensor and the tester. That 
is, the scheduler will decide whether yi is to be transmitted 
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or not. A natural question is how to design an efficient and 
easily implementable scheduler to achieve a good detection 
performance, even under the potential cyber attacks. 

As in (28), we do not consider other communication issues 
such as packet losses, transmission delay, data quantization, 
channel noise and etc. This implies that if there is no mea¬ 
surement sent from the sensor at time i, the tester does not 
receive anything from the channel and understands that y t is 
censored. Hence, the information received by the tester at time 
i is given by 

Zi = {nyulii<h}- (3) 

For noisy channels, the binary-valued 7 \ can be available 
to the tester by sending merely one bit message from the 
sensor node. It should be noted that in light of the main 
approach of this work can be generalized to address some 
channel medium effects, although we do not plan to do so for 
brevity. 

Given an arbitrary scheduler { 72 }, we adopt the so-called 
scheduled transmission rate 113 to roughly evaluate the 
average communication cost at time N as follows 

, N 

Re = ]v ( 4 ) 

2—1 

where the mathematical expectation E© [-] is taken with respect 
to the probability measure Pg. Intuitively, Rg characterizes the 
frequency of measurement transmission in the average sense. 
Obviously, a larger scheduled transmission rate corresponds to 
a higher ratio of the number of transmitted measurements to 
the total number of sensor measurements. 

Under the above detection framework, the objective of this 
work is as follows. 

1) Given a scheduled transmission rate constraint, design an 
efficient and practical scheduler in the sense of achieving 
a good detection performance. 

2) Design tester signal processing protocols to maintain 
system functionality when deceptive signals are injected 
into the system. 

3) Exactly quantify the effect of the scheduler and different 
attack intensities on the asymptotic detection perfor¬ 
mance. 


B. LRB Scheduler 

Given a full set of sensor measurements y = {yi ,..., yiv}. 
recall that the rejection region for the null hypothesis of the 
standard Neyman-Pearson (N-P) test for a binary detection 
problem is expressed by 

{y : /(y|0i) > kfi y|6»o)}, (5) 

where f(y\9j) denotes the joint probability density function 
(pdf) of y with respect to 6 £ { 0 o, 0 i} and k is a decision 
threshold. It is well known that the N-P test is a uniformly 
most powerful test for the detection problem Q under the 
full set of measurements y. 

Since yi is a sequence of independently and identically 
distributed (i.i.d.) Gaussian random variables, the rejection 


region in 0 can be explicitly expressed as 


N 




i=l 


PeAyi) 

POoivA 



( 6 ) 


where pg(yt) = J\f{yp, 0, a 2 ) and A f{yt\ 0 , o 2 ) is the pdf of a 
Gaussian random variable with mean 9 and variance a 2 . 

As the rejection decision is mainly decided by the likelihood 
ratio, we resort to the likelihood ratio function to quantify the 
importance of a sensor measurement as follows 


g(y KA) 


psAv) 

P80 ( V ) ’ 


(7) 


In fact, if g(yi\6o,Q{) is far from one, the measurement 
yi will lead to a significant change of the likelihood ratio, 
and eventually affects the tester decision. Thus, we expect 
that yi associated with a likelihood ratio far from one may 
contain useful information for detection, and a measurement 
with its likelihood ratio close to one is regarded as non-useful 
or uninformative. 

Taking advantage of the above observation and noting that 
y, is an i.i.d. random sequence, we propose a likelihood ratio 
based (LRB) scheduler of the following form: 


f 0, if 1/a < g{y l \9 0 ,9 1 ) < a; 

^ 1 , otherwise. 


where the scheduling parameter a > 1 and is to be designed. 
Informally speaking, the scheduler helps the sensor to smartly 
decide whether a sensor measurement is useful or not. To 
reduce the number of sensor communication, only useful 
measurements will be transmitted to the tester through a non- 
secure network and discard the rest of measurements. 

The LRB scheduler can be further simplified. For instance, 
let the parameters a and b satisfy that 

g(a\0 o ,9 1 ) = - and g{b\6 0 ,0A) = a. (9) 
a 

It follows that 

1 = -■(* = g(a\9oi 9i) ■ g(b\9 Q , 0i) 

a 

= exp([( 0 ! - 0 o )/a 2 ] • [a + b - ( 0 O + 0 i)]), 


which implies that 


ci + 6 — 0g + 01. 


( 10 ) 


We also notice that 


g(y | 0 oA) 


peAv) = ex p(-(y - 0 i) 2 /2ct 2 ) 

P8 0 (y) exp(-(y - 9 0 ) 2 /2cr 2 ) 
exp(y(0i - 0 o )/cr 2 )exp((0o - 9 2 )/2a 2 ). 


It is clear that g(y\9 0 , 0i) is an increasing function in y. Thus 
the LRB scheduler in ([ 8 ]i can be explicitly rewritten as follows 


f 0 , if a < yi < b; 

y 1 , otherwise. 


( 11 ) 


where a < b and a+b = 0o + 0i- See Fig. 2 for an illustration, 
which indicates that yi close to the center of 0 O and 0\ is not 
useful for the detection problem. This is consistent with our 
intuition as it is usually difficult to discriminate whether y t is 
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sampled under Ho or H\ when y, is close to the center of 0$ 
and 6\. From this point of view, it explains the motivation of 
developing the LRB scheduler. 



Fig. 2. Scheduler thresholds 


where /(z| 0 ) is the joint Pdfl of z := {zi,..., 2 jv} corre¬ 
sponding to 9 € {9 0 ,9i}. 

It follows from Neyman-Pearson lemma GU that the above 
test is a uniformly most powerful (UMP) test. That is, if we 
restrict to the class of all level a tests (control the probability 
of Type I error as at most a), the N-P test would lead to 
the smallest probability of Type II error. Note that a Type I 
error (or error of the first kind) is the incorrect rejection of a 
true null hypothesis, and the probability of the Type I error 
is conceptually given by Pg 0 (JZ). While a Type II error (or 
error of the second kind) is the failure to reject a false null 
hypothesis, and its probability is denoted by Pg^lZ 0 ). 

1) N-P Test Under a LRB Scheduler: Under the LRB 
scheduler {U}. the information received by the tester at time 
N is written as z = {zi,..., zjy}, whose pdf is given by 

N 

f(z\9) = \\ve{zi) 

2 = 1 
N 

= n \PT(yi\0 1 v 2 , a ob)y i [Pe{h = 0}] 1_7i ,(13) 

*=l 


C. Random Scheduler 


If the sensor is not smart enough, it randomly selects a 
measurement and transmits it to the tester. To investigate 
this situation, we also consider a random scheduler for the 
detection problem by letting 


J 1 , with a probability p; 

0 , with a probability 1 — p, 


( 12 ) 


and the scheduling sequence 7 , is an i.i.d. process, which is 
independent of sensor measurements. 

In comparison with the random scheduler, 7, of the LRB 
scheduler is a deterministic function of the sensor measure¬ 
ment yi. If yi is not transmitted by the sensor, the tester 
deduces that a < Vi < b, which can also be utilized to 
improve the detection performance. Thus, it is expected that 
the LRB scheduler may achieve a better detection performance 
under the same scheduled transmission rate. We shall formally 
confirm it in the sequel. 


where Pt{ ) is the function of the truncated Gaussian pdf that 
lies within the set U = (— 00 , a] U [b , 00 ), and is expressed as 

Pr{y\9, v 2 , a, b) = \p ^ ^uiy), (14) 


where Ijj(y) is an indicator function, and </?(•) is the pdf of a 
standard Gaussian random variable, i.e., 


V>(t) 
iu(y ) 


yfc exp( -' 2/2); 

f 1, if yeu, 

1 0, else. 


Then, the null hypothesis will be rejected if the following 
condition is satisfied 


tt // PeAn = °} 

,4.4 \PT{yi\9o,cr 2 ,a,b)J \ p eo{7i = 0} 


l-7i 

> k (15) 


III. Performance Analysis under Normal 
Conditions 

In this section, we focus on the LRB scheduler design under 
secure communication channel, while the case under cyber 
attacks is discussed in Section HVl 

A. Neyman-Pearson Test 

We explicitly establish an N-P test under the scheduled 
communication in secure communication environment. To this 
end, define a rejection region of the null hypothesis for the N-P 
test as 

P = {z : /(z| 0 i) > kf(z\9 0 )}, 
and an acceptance region of 'Ho in favor of H i as 

n c = {z: f(z | 0 i) < kf(z\e 0 )}, 


where k £ R is to be designed to satisfy a given performance 
requirement. To simplify the notation, let 


>I>(a:) = f <p(t)dt; 

J —OO 


z\6) 


a — 6 
a 


z 2 (0) 


b — 9 

G 


The probability of event { 7 ^ = 0} can be easily obtained as 


PeH=0}=Hz 2 (0))-Hz\e)). (16) 


1 Strictly speaking, it is not very accurate to use the pdf of z due to that 
the random vector z is evidently not continuous. To capture the essence of 
our idea, we state the pdf of z throughout this paper rather than adopt the 
probability measure. 
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By ® - (jT^J), we shall reject L/q if 




(0i - 0 O ) 


AT 


2 cr 2 


7i2/i 


2 — 1 
N 


i— 1 


. , /Ar V- ,, /$(2 2 (0 o)) -$(^(0 o ))\ 

>bt+(JV -g 7 i ) 1 „^ 5? - TO - ?5WI j 


= In fc, 


(17) 


where ln(-) is the natural logarithm function, and the second 
term in the last inequality becomes zero. 

2) N-P Test under a Random Scheduler: The joint pdf of 
z = {zi,..., zn} with respect to 0 under a random scheduler 
( fi~ 2 | i is given by 

N N 

/(z|0) = pe(zi) = [p ■ J\f(y l \8 1 a 2 )]' 1 '[l -p] 1-7 ’. (18) 

i=1 i= 1 


Similarly, we shall reject TLo in favor of TL \ if the following 
condition is satisfied 


~(Qi ~ d o) 

2o 2 


+ In*. (19) 


Remark 1. In light of f |/ 7[ t ant/ ( |79| ), it is interesting that the 
rejection conditions of both schedulers are of the same form. 
This means that there is no need for the tester to know which 
type of scheduler is used in the sensor node. Note that 7 \ in 
© is completely determined by yi while it is independent of 
y h 1 m This will result in different detection performance. 

For the LRB scheduler in ( 0 - it may not be possible to ex¬ 
plicitly calculate the probabilities of Type I and II errors under 
a given parameter k, although numerical algorithms can be 
used. However, both probabilities will decrease exponentially 
to zero as the number of sensor measurements tends to infinity. 
In the sequel, we shall quantify this convergence speed. 


B. Asymptotic Detection Performance 

We design an optimal LRB scheduler in the sense of 
achieving the fastest convergence of the probability of Type II 
error under a scheduled transmission rate constraint, and that 
the probability of Type I error is controlled below a certain 
level. Note that it is impossible to simultaneously minimize 
the probabilities of both Type I and II errors j 18) . 

1) Relative Entropy and Stein’s Lemma: We recall the 
Stein’s lemma ]29) that the best error exponent for the 
exponential convergence of the probability of Type II error 
is determined by the relative entropy (Kullback-Leibler diver¬ 
gence) from the null to alternative hypotheses. 

Given two probability measures Pi and P 0 over a set X , 
and P 0 is absolutely continuous with respect to Pi, the relative 
entropy D from If to Pi is defined by 


D(P 0 \\Pi) = f In 
J x 


dPo 

dPi 


dPn 


( 20 ) 


where dPo/dPi is the Radon-Nikodym derivative [ 301 of P 0 
with respect to Pi, provided that the expression on the right- 


hand side of (20 1 exists. In fact, D(Pq\\Pi) characterizes the 


distance between two probability measures, which is a key 
factor to deciding the asymptotic detection performance. 

Lemma 1. (Stein’s lemma) Let X \. A’ 2 , .... X n be an i.i.d. 
random sequence under the probability measure Q over a set 
X. Consider a binary hypothesis testing problem 


TLo: Q = P 0 versus TL\\ Q = P\, (21) 

where D(Pq\\Pi) < 00 . Let IZ n C X n be a rejection region 
of the null hypothesis TLo obtained by the N-P test. Let the 
probabilities of Type I and II errors be 

a n = P 0 ”(P„) and p n = P?(ll c n ), ( 22 ) 


where 

Pj(’) = Pj X • • • x Pj(-) , 

n 

is the product measure © 

For 0 < e < define 


min /3„. 

IZn C X 71 , Otn < € 


(23) 


Then it follows that 

lim -ln/% = -P>(P 0 ||Pi). (24) 

n—>00 Tl 

Lemma [I] quantifies the asymptotic performance of the N-P 
test. Specifically, if the probability of Type I error is controlled 
to be less than e, the number of samples required to guarantee 
the probability of Type II error below a certain level S < 1 is 
approximately given by 

n ~ — 7 — 77 —- In ( — ] . (25) 

D(P 0 ||Pi) W 

To achieve a given detection performance, the relative en¬ 
tropy thus can approximately evaluate the number of samples 
required for discriminating between the null and alternative 
hypotheses. The larger the relative entropy is, the smaller the 
number of samples is required to discriminate the null and 
alternative hypotheses by using the N-P test. 

Hence it is sensible to maximize the relative entropy 
D(Po\\P\) to achieve an asymptotically optimal hypothesis 
test in the sense of minimizing the probability of the Type 
II error. We shall design the optimal LRB scheduler to 
maximize the relative entropy from TLo to 'H 1 . 


2) Optimal LRB Scheduler: In view of ©■ the relative 
entropy for the binary detection problem Q is a function of 
scheduling parameters a and b. Thus, we rewrite D(Pg 0 \\Pg 1 ) 
under the scheduler © as 

L l (a 1 b) = D{Pg 0 \\Pg 1 ). (26) 

Definition 1. Given a scheduled transmission rate constraint, 
i.e., Rg f R, the optimal LRB scheduler for the N-P test is 
solved by the following constrained optimization problem 

maximize Li(a,b) 
subject to Rg ^ R, 0 £ { 6 >o , 6*1 }, 
a -f b = 0o T 0 i, a ^ b. 
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Note that Rg is introduced in (|4ji. Since yi is an i.i.d. random 
sequence, it follows that 7 , is also i.i.d. This implies that Rg = 

Eflbt] = Pel'll = !}■ 

The following theorem gives an optimal LRB scheduler and 
quantifies its asymptotic detection performance. 


Theorem 1. Given a scheduled transmission rate constraint, 
i.e., Rg ^ R, the relative entropy from Rq to "Hi under the 
LRB scheduler 4 ZD is given by 


Li (a*,b*) 


[ 0 \ - dpR e l - 80 
2 a 2 a 2 

X [ VPe 0 (y)dy (27) 

J (—oo,a*]U[ 6 * ,00) 


where the scheduling thresholds a* and b* satisfy that 



= 1 — [ <p(t)dt = R, 

(28) 


J a *~ e 0 



b* — 6 -1 


Rb ! 

= 1—1° ip(t)dt = R. 

(29) 


Proof: See Appendix A. 


Remark 2. For the conventional detection problem using the 
full set of sensor measurements, which results in that R = 1, 
it follows from Theorem^that a* = b*. This implies that 

r*_ {el- 6 l) 9,-8 0 

1 2a 2 fj 2 

(0i - 0o) 2 

2 <t 2 ' 

3) Performance Analysis: Now, we evaluate the asymptotic 
performance of the optimal LRB scheduler. Let us consider the 
random scheduler in | [T2| ). 

Lemma 2. Given a scheduled transmission rate constraint, 
i.e., Rg ^ R, the maximum relative entropy under the random 
scheduler in © is given by 

L 2 = D(Pg 0 \\P ei )= R . (31) 

Proof: Recall that Zi is an i.i.d. random sequence with 
the pdf given by 

pg(z) = [p • A%;0,o- 2 )] 7 [1 -p] 1-7 , (32) 

where 9 £ {0 o ,0i} and 7 e {0,1}. Then, the relative entropy 
of the two distributions from 7f 0 to 'H \ under the random 
scheduler is computed as follows 


ype 0 {y)dy 


(30) 


DiPeoWPeJ 


f hr P^illdFg 0 (z)+ j In I ^^dF 9o (z) 
7{ 7 = 1 } Pe 1 {z) J { 7=0 } PeA z ) 

PB 0 (y) 


= p- 


pe 0 (y) h 


J —00 

{el-el)p 

2 a 2 J 

(0r - 0 O fp 

2a 2 


Pe 1 (y) 


dy + 0 


P6 0 (y)dy- 


(01 - 0 O )p 


yp8 0 ( y)dy 


where Fg(-) is the distribution function of random variable z r 
under 9 £ {9q, 9 1} and pg(y) is the pdf of y with an abuse of 
notation. 

Consider the scheduled transmission rate constraint, we 
obtain that 

Rg = p^ R, (33) 


which establishes the desired result. ■ 

In the following result, we prove that the LRB scheduler 
strictly improves the random scheduler. 

Theorem 2. Under the same scheduled transmission rate 
constraint, i.e., Rg f R, the optimal LRB scheduler achieves 
a strictly better asymptotic N-P testing performance than the 
random scheduler if 0 < R < 1, i.e., 


Li(a*, b*) > L 2 

where Li(a*,b*) and L 2 are given in Theorem^and Lemma 
[2] respectively. 

Proof: Under a scheduled transmission rate constraint 
R < 1 and for any pair of a* and b* satisfying (281 and 
( |29| ), it follows from Theorem [I] and Lemma [2] that 

Li(a*,b*) — L 2 

(01 - e 0 )R 


yPe 0 (y)dy 


(0i - 0 O ) 


’ (—oo,a*]U[b* ,00) 


yp8 0 ( y)dy 


70 


rb* 


cr* 

0i — 0o 


yP 8 0 {y)dy-(l-R) / ypg 0 ( y)dy 


J yp8 0 {y)dy - (1 - R)9 0 j . 


Note that a* + b* = 0 O + 0i and b* > a*, we obtain that 


0 o -6* < —la* — 0 O |. 


This further implies that 

[ yP 8 0 {y)dy- (i-R)9 0 


(:y - 00 )pb 0 ( y)dy + 00 f pg 0 {y)dy - (1 - R) 6 q 

J a* 


tip(t)dt — a 


t<p(t)dt 


> 0 — er 
= 0. 




\ a *~ d o\ 


tip(t)dt 


Since 9\ > 9q, it is obvious that L\ {a*,b*) — L 2 > 0, which 
completes the proof. ■ 

Example 1. We provide a graphical view in Fig. [j] to compare 
the error exponents (relative entropy) for the tw>o schedulers 
under different scheduled transmission rate constraints by 
setting 9 q = 0, 0i = 1, and a 2 = 1. For the random scheduler, 
the error exponent grows linearly with respect to the scheduled 
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Fig. 3. Comparison of error exponents of the LRB scheduling strategy 
and random scheduling strategy under different scheduled transmission rate 
constraints. 


transmission rate. For the LRB scheduler, however, we observe 
a faster increase of error exponent when transmission rate is 
lower than 0.4. It is also noteworthy that when only 70% of 
sensor measurements are sent, the detection performance of 
the LBR scheduler is only 2.1% worse than the standard N- 
P test using the full set of measurements. This suggests that 
the use of the scheduler with the form of © is an effective 
method for maintaining a good detection performance when 
the scheduled transmission rate is limited. 

IV. Performance Analysis Under Cyber Attacks 

Till now, we have considered the problem of networked 
detection problem via the Neyman-Pearson approach, where 
the communication channel is assumed secure. In this section, 
we studied the same problem over non-secure channels. In 
particular, the deceptive signals from the intruder are injected 
into the channel and arrive at the tester together with the true 
measurements. Then, if the sensor measurement y, is directly 
sent, it is impossible for the tester to distinguish the true 
measurement from the deceptive signal. 

Observe that the binary state 7 * of the LRB scheduler can 
usually be securely encrypted, and successfully transmitted to 
the tester. We shall explore this information to retrieve some 
sensor measurements for accomplishing the detection task. 
To this purpose, we first propose a measurement discriminate 
protocol and then evaluate the error component for detection 
under different attack intensities. 


A. Measurement Discrimination 


Recall the LRB scheduler in ( 111 . If a packet with the 
message that 7 , = 0 arrives, it can be deduced by the tester that 
yi £ (a, b) and no sensor measurements shall be sent. When 
the message 7 , = 1 comes, the tester is informed that a true 
sensor measurement should satisfy that pi £ (— 00 , a] U [b, 00 ). 
Thus, we are able to design the following signal processing 
protocol for the tester to retrieve some sensor measurements 
while all the deceptive measurements are discarded. 


• When 7 i = 0 is observed by the tester, discard all the 
received measurements (if there is any). 

• When 7 i = 1 is observed by the tester and there is only 
one measurement in the range (— 00 , a] U [b, 00 ), then 


select it as the true sensor measurement y t . Otherwise, 
discard all the received data. 

The first rule is obvious. Arrival of 7 , = 0 indicates that 
no sensor measurement is sent from sensors. Thus, all the 
received data are deceptive data and discarded. 7 * = 1 suggests 
that a useful sensor measurement pi £ (—00, a] U [6, 00) must 
have been transmitted to the tester. However, the tester may 
also receive a deceptive signal q, . If q t ^ (—00, a] U [b, 00), 
the tester can correctly identify the true measurement If 
qt £ (—00, a] U [b, 00), the tester has to discard all the received 
data since it is impossible to distinguish between qi and y,. 

If there is no scheduler in ( pT) , the tester can not distinguish 
between pi and q, at every sampling time, and thus fails 
to complete the detection task. From this point of view, the 
scheduler helps to against this type of cyber attacks. Obviously, 
the detection performance degrades when deceptive signals 
come more frequently. To formalize it, let a binary variable 
fi to denote whether the attacker injects a deceptive signal to 
the channel, e.g., Q = 1 means that there is a deceptive signal 
qi in the channel, otherwise £* = 0. Thus, attack intensity 
Pi := Pr{Q = 1} reflects the frequency of attacking the 
networked system. We further assume that the deceptive signal 
{< 7 ;} forms an i.i.d. sequence, and let 

77 = 1 — Pi ■ Pr{q.i £ (—00, a] U [6, 00)} ( 34 ) 

Under the above discrimination scheme, each transmitted 
sensor measurement will be affected by cyber attacks with 
probability 1 — 77 . In the rest of this section, we shall quantify 
the effect of cyber attacks on the detection performance by 77 . 


B. Performance Analysis 

The sensor information accessed by the tester at time N is 
denoted by w = {wq,..., wn}. whose pdf is given by 

N 

f O| 0 ) = IJpe(wi) 

i= 1 
N 

= H{[v PT (y,\ey,a,b)]\i - t ?) 1- ' 5 ’} 

i= 1 

■[Pe{li = 0 }] 1_7i , (35) 

where is a binary random variable. It is one if the trans¬ 
mitted measurement pi is correctly identified by the tester and 
6 i = 0 otherwise. 

By a similar derivation in ([T4|-([T6|, we shall reject "Ho in 
favor of Hi when the following condition is met. 


-(g;-gg) 

2cr 2 


N 




(0i - 0o) 


i=l 


N 

y Si ■ jiPi > In k. (36) 

*=1 


Remark 3. It is noteworthy that Si equals to one if there is 
no cyber attack. The rejection region in © is then reduced 
to the one in m This suggests that the proposed detection 
framework is more general and can perform robustly under 
non-secure channels. 


The following theorem quantifies the influence of cyber 
attacks on the detection performance under different attack 
intensities. 











Theorem 3. Under the LRB scheduler in 0 with cyber 
attacks, the relative entropy for detection is given by 

D(P eo (w)\\P ei (w)) = r, ■ D(Pg 0 (z)\\P 6 l (z)), (37) 

where D(Pg 0 (z)\\Pg 1 (z)) denotes the relative entropy under 
secure channel and is given in (261, and r) is defined in ( 34 1. 

Proof: Recall that Wi is an i.i.d. random sequence with 
the pdf given by 


Pe(w) = {\vP T (y\0,(T 2 ,a,b)] S { 1 - 77) 1 ^ [Pg {7 = 0}] 
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where 6 £ {0o,$i} and 5,7 £ {0,1}. The relative entropy of 
the two distributions from 77 0 to "Hi under the sensor scheduler 
and the proposed measurement discrimination over non-secure 
channels is computed as follows 


D(P, P W||P # ,H) 

= [ 1 

J{ 7 =i} PeA w ) 


dFo 0 (w) + 


f ln?&M 

{7=0} Pe A w ) 


dFs 0 (w) 


'{7=0} 


, Pe 0 {w) , , , 

In- —dFg 0 (w) + 


Pe i(w) 

P9 0 (w) 
Pe 1 (w) 


In 


{7=1,<5=1} 

dF 6 o (w) 


, P 9 0 [w) 

In- rF dF 9o ( w ) 

P9 1 {' w ) 


{ 7 = 1 ,<5=0} 

[ , ,n ,x, PT{y\Oo,v,a,b) 

/ VPT{y\ 0 o,a,a,b)ln ——- jrdy + 0 

7=1} PT{y\ 0 i,a,a,b) 


+ p 9 a {l = 0} • In 


P 9g{l = 0} 
^{7 = 0 } 


= V ■ 

+ p 9 a {l = 0} • In 


, m exp[-(y-6» 0 ) 2 /2cr 2 ] A 
P 9 0 ( V ) ln -; 7- „ s2 „, dy 


(-oo,o]u[fc,oo) exp[—(y —0i) /2cr 2 ] 

P 8 0 {7 = 0 } 


v(0i - do) 


^{7 = 0} 
yp9 0 ( y)dy - 


ype , 


1 (y)dy) 


riW-Ol) 


2 a 2 

From ([TOt, w e obtain that 


p 9 0 { 7 = 1} + -Pe 0 {7 = 0} ■ In 


^o{7 = 0 } 
^{7 = 0 } 


P 9o {7 = 0} = 


01 -fa 


ip(t)dt = 


= J g _^ <p(-t)d{-t) = 
= P 01 { 7 = O}. 


ip(t)dt 

b-e 1 

I ip(t)dt 


It follows that 


D( p 9 0 (w)\\ p ei (w)) 
V( 0 i - d 0 ) 


VP9 0 ( y)dy 


= 77 • D(Pg 0 (z)\\Pg 1 (z)), 


yp 9 0 (y)dy 


(38) 


which completes the proof. 


By Lemma [T] an optimal LRB scheduler for detection 
should be designed to maximize the relative entropy from H 0 
to U\. Clearly, D(P 9o (z)\\P ei ( 2 )) increases in a but decreases 
in b. However, increasing a will decrease the robustness of the 
LRB scheduler against cyber attacks, which is obvious by 0 
and Theorem [3] Note that the role of the parameter b is similar 
to the parameter a. Together with Theorem[3] the optimal LRB 
scheduler for detection under cyber attacks can be defined. 

Definition 2. Under cyber attacks, the optimal LRB scheduler 
in ( |77| ) for the N-P test is solved by the following constrained 
optimization problem 

maximize rj ■ D(Pg 0 (z) \\Pg x (z)) 
subject to Rg ^ 77, 9 £ {6*o, 6*i}, 

cl F b = Qo d\, cl ^ b. 

In view of the definition of // in 0 - solving the above 
optimization problem requires the distribution of attack signal 
< 7 ,, which however is generally unknown to the design of the 
LRB scheduler. Note that a typical detection system usually 
works under system state "Ho : {9 = 6*o} in the majority of 
time. An intelligent attacker is likely to fabricate a false alarm 
in the system by sending deceptive signals generated from 
distribution Pg 1 according to the alternative state 77 1 : {9 = 
9i}, i.e., qi ~ P 8l . 

Under this case, we provide a graphical view in Fig. [4] to 
illustrate how the error exponent (relative entropy) in Theorem 
[3] changes under different attack intensities. Particularly, let 
9q = 0 , 9 1 = 1 , and o 2 = 1 whereas the attack intensity 
varies from 0.1 to 1.0. The case when no attack happens (i.e.. 
Pi = 0 ) is also depicted for comparison. 



Fig. 4. Comparison of error exponents for detection under different attack 
intensities and different scheduled transmission rate constraints. 


By Fig. El it is apparent that a higher attack intensity results 
in a smaller error component, which is certainly consistent 
with the intuition as more deceptive signals will be received 
by the tester. It is interesting that the LRB scheduler with 
a lower scheduled transmission rate is more robust to cyber 
attacks. For example, when the rate is less than 0.3, the 
error exponents under different attack intensities are close. 
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An instant explanation is that only a small portion of sensor 
measurements will be attacked by the deceptive signals. 

The advantage of using the LRB scheduler becomes signif¬ 
icant for a relatively large attack intensity (Pj > 0.5). Without 
the LRB scheduler, which corresponds to that the scheduled 
transmission rate is equal to one, the error components do 
not always attain their maximum at R = 1. To get the best 
detection performance (e.g., the maximum error component), 
we have to resort to an effective LRB scheduler for the case 
that Pi > 0.5. 

Under the extreme case (Pi — 1.0), the error component 
even goes to zero as the scheduled transmission rate ap¬ 
proaches one. This implies that without the LRB scheduler, 
the detection task can not be completed for the large attack 
intensity. In fact, without a LRB scheduler, every sensor 
measurement will be corrupted and can not be distinguished 
from the deceptive signals. Thus, all the sensor measurements 
will be discarded, leading to the failure of discriminating the 
system state. This clearly explains the motivation for designing 
a LRB communication scheduler in the sensor side. 


V. Simulation 

In this section, the theoretical results will be validated 
respectively via simulations. 

A deterministic signal in Gaussian noise is given by: 

yi = e + Vi,i = 1,2,..., (39) 

where 0 G R is an unknown parameter for hypothesis testing, 
and Vi is a white Gaussian noise with variance a 2 = 1. 
Consider a hypothesis testing problem as follows: 


A. Detection Performance Without Cyber Attacks 

In this subsection, we check the testing performance of the 
scheduler based N-P test from the Neyman-Pearson approach, 
where we fix the probability of Type I error at a = 0.05 and 
numerically compute the probability of Type II error using the 
Monte Carlo method. The channel is assumed to be secure, 
and the rejection condition of the null hypothesis is given by 


(17 1 and (19 1 . Here we take a two-step procedure to perform 
the simulation. 

In the first step, we determine the parameter k to satisfy that 
the probability of Type I error is controlled to below a = 0.05 
under different sizes of sensor measurements, and scheduled 
transmission rate constraints. Given a scheduled transmission 
rate constraint R, define 


t n ■- 


-{01-el) 


2<t 2 


N 

■S'* 

2=1 


{01 - 9 0 ) 

/t-2 


N 

E 

2=1 


liVi 


Of 


= Tn -i - ( -y7 n - OiInUn 


(42) 


where 7 * is given in ( fTT) and Theorem [T] For each N, we 
independently generated S = 5000 samples from a Gaussian 
random variable under Ho- Then, we recursively obtain a 
data set with size S for each N, i.e. Tn = {T^}f =1 using 
(42 1 , from which an empirical distribution of Tn can be 
obtained, and denoted as Fn{-,oj) with ui £ fl. By the 
Glivenko-Cantelli theorem | Tl |. it is known that the empirical 
distribution converges almost surely to the true distribution 
of Tn- This means that Fn{-,uj) is a good approximation of 
the true distribution of Tn- Then, the corresponding testing 
parameter k for each N is selected as 


fcjv = exp(inf{x|J 7 Ar(a:, ut) ^ 1 — a}). 


Ho ■■ {0 = 0 } 


Hi : {9 = 9,}. (40) 


Obviously, the testing problem in this case is a signal 
detection problem, i.e. detecting the presence or absence of 
a deterministic signal in Gaussian enviornment. Accordingly, 
the signal to noise ratio (SNR) is given by 


SNR = 101o glo ( ^ ) [dB], 


(41) 


Low observation SNR of —3 dB, medium observation SNR 
of 0 dB and high observation SNR of 3 dB are adopted in the 
numerical test. 

The simulation is conducted from two aspects. Firstly, we 
verify the testing performance of the N-P test in Section m 
under the LRB scheduler with different communication con¬ 
straints. For comparison, a random scheduler and an optimal 
N-P tester with the full set of measurements are considered. 
Secondly, we test the detection performance of the N-P test in 


Section IV under the scheduler at the sensor and the receiving 
protocols at the tester when false data injection attack happens. 
Simulations are conducted under different transmission rates 
and attack intensities to show the robustness of the system in 
different scenarios. 


In the second step, the parameters determined above are 
used to compute the probability of Type II error. Similarly, we 
independently generated S = 5000 samples from a Gaussian 
random variable under Hi, and recursively obtain a data set 
Tn with size S for each N. By the N-P test, we count the 
number of samples that accept Ho, and the probability of Type 
II error is approximately given by the ratio of the total number 
of samples accepting Ho to S, i.e. 

#{i\T l N accepts Ho, 1 < i < S} 

P N = - 5 -’ 

where ffA denotes the cardinality of set A. 

Fig. [5] illustrates the numerically computed probability of 
Type II error under a scheduled transmission rate constraint 
Re C- 0.5 while Fig. [ 6 ] shows the result under a scheduled 
transmission rate constraint Re sf 0.1. It is observed from Fig. 
[5]that the probability of Type II error under the LRB scheduler 
comes close to the standard N-P test using the full set of 
measurements, and they are indistinguishable for a reasonable 
size of sensor measurements. Under both scheduled commu¬ 
nication rate constrains, it is evident that the probability of 
Type II error of the LRB scheduler is smaller than the random 
scheduler. This numerically demonstrates the effectiveness of 
the LRB scheduler, and supports our theoretical results. 
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(a) Probability of Type II error at SNR -3dB 



Number of samples N 


(b) Probability of Type II error at SNR OdB 



(c) Probability of Type II error at SNR 3dB 


Fig. 5. Comparison of probability of Type II error under communication constraint Rg £ 0.5 in secure channel 
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Fig. 6. Comparison of probability of Type II error under communication constraint Rg ^ 0.1 in secure channel 


B. Detection Performance Under Cyber Attacks 

In this subsection, we examine the detection performance of 
N-P test when deceptive signals are injected into the channel. 
Similar to the previous subsection, the probability of Type 
I error is fixed at a = 0.05 and the probability of Type II 
error is obtained via the two-step Monte Carlo method with a 
modification on the testing statistic 7'y as follows. 


T' n ■■= 


2<t 2 


5Z 5i ' 7<' 


(<Oi - 0 O ) 


N 


s> 


2=1 


2=1 


= T ' n _r - (^-SnJn — BiSn^nUn^) ■ 


7 iVi 


(43) 


The deceptive signals are assumed to be generated from 
distribution Pg 1 according to the alternative hypothesis Hi : 
{9 = 0i} to fabricate a false alarm in the system. The SNR is 
fixed at 0 dB. Low attack intensity of Pi = 0.1, medium attack 
intensity of Pi = 0.5 and high attack intensity of l\ = 1.0 are 
considered in the simulation. 

Fig. □ depicts the numerically computed probability of 
Type II error when the system is being affected by cyber 
attacks. The detection performance under low, medium and 
high attack intensities are given by Fig. [7] (a), (b), and (c) 
respectively. For a certain attack intensity, testing results 
under different levels of transmission rate constraints, e.g., 
R £ {0.1,0.3, 0.5,0.7, 0.9,1.0} are illustrated in the figure. 

It is clear from Fig [7] (a) that a higher communication rate 
generally results in better detection performance under low 


attack intensities. For the medium and high attack intensities 
given in Fig.[7](b) and (c), however, the result is quite different. 
The best detection performance is obtained at R = 0.5 and 
R = 0.3 when the system is suffering cyber attacks with 
intensities Pi = 0.5 and Pi = 1.0 respectively. When the 
transmission rate approaches to 1, the testing performance 
deteriorates significantly. At high attack intensity (Pi = 1.0), 
transmitting 90% sensor measurements doesn’t achieves a 
comparable performance to the case with merely 10% mea¬ 
surements are transmitted. This scenario can be explained by 
the fact that a large portion of transmitted measurement are 
discarded at the tester since tme sensor measurements become 
less and less discriminative among deceptive signals when the 
transmission rate increases. 

VI. Conclusion 

Due to communication constraints and possible cyber at¬ 
tacks of a non-secure network, we have proposed a LRB 
scheduler for the binary detection problem. The challenge 
of this testing framework lies in the nonlinearity of the 
scheduler. Asymptotic analysis results demonstrate that the 
LRB scheduler for a secure network shares a comparable 
detection performance to the standard one using the full set of 
sensor measurements, even under a moderate communication 
cost. Meanwhile, it achieves a strictly better exponent of Type 
II probability of error than the random scheduler. Under cyber 
attacks by injecting deceptive signals to the network, the LRB 
scheduler can also maintain its detection functionality. The 
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(a) Probability of Type II error at low attack intensity (b) Probability of Type II error at medium attack (c) Probability of Type II error at high attack inten- 
Pi = 0.1 intensity Pi = 0.5 sity Pi = 1.0 


Fig. 7. Comparison of probability of Type II error under different attack intensities. 


degradation of detection performance under different attack 
intensities was exactly quantified by means of asymptotic 
analysis. 

Our future work is to extend the idea of the LRB scheduler 
to the multiple hypotheses case, i.e., 9 £ {9o, ..., 9m-i} and 
M > 2. However, this entails a new challenge in selecting 
informative measurements, and conducting the asymptotic 
analysis. Another important future research is to study the vec¬ 
tor measurement. There are two possible approaches for this 
generalization. One is to sequentially decide the transmission 
of each element of the measurement vector. The other is to 
compress the measurement vector into one dimensional scalar. 
Although these extensions will be interesting, they are beyond 
the scope of this paper and left to our future work. 


Appendix A 
Proof of TheoremQ] 

Proof: Recall that Zi is an i.i.d. random sequence with the 
pdf given by 

p e {z) = \p T {y\0 1 a,a,b)]' i [P e {'y = 0 }] 1-7 , 

where 9 £ {9 o, 9\] and 7 £ {0,1}. The relative entropy of the 
two distributions from Rq to "Hi under the LRB scheduling 
scheduler is computed as follows 

D(Pe 0 \\P ei ) 

P 80 (z) 

m -— —ure 0 \z) - 1 - / in 

/{ 7 = 1 } 


/ ln ( \ 
/{ 7 =0} P0 1 (z) 


dFg o (z) 


/{ 7 =i} 


( \a mi Pr(y\0o,<r,a,b) 

PtIvWo, c, a, b) ln ——- —dy 

PT{y\0i,(T,a,b) 


+ 


ln ^°! 7 °} dFg 0 (y) 


{7=0} PQi {7 0} 


' (—oo,a]U[ 6 ,oo) 

n,T»-h = °J 


t m exp[—(y — 0 O ) /2c 2 ] 
pbo( y ) ln —7 7— „ s2 „ d v 


ex p[— (j/ — 0i) /2cr 2 ] 


PeAl = 0} Ja 
Pe o h=l}-(0P9 2 o ) 


P8 0 ( y)dy 


2 a 2 


+ -Pe o {7 = 0} - In 


^ol7 = 0} 

^{7 = 0 } 


h-0o 


' oo,a]U[ 6 ,oo) 


ype 0 (y)dy 


From (flQ|, we obtain 


Pe o (7 = 0} = 


-op 

-b 


ip(t)dt = 


ip(t)dt 


<p(-t)d(-t) = 


ip(t)dt 


(44) 


= PeAl = 0}. 

Then, it follows that 

L 1 (o ) 6)=I>(P fl0 ||P ei ) 


G 

(9 1 — 9%) 


yp8 0 (y)dy + / ype 0 {y)dy 


2 a 2 


PbA 7 = 1}- 


(45) 


Note that a + b = 9q + 9\ and b > a, we obtain 
\b — 9 q\ > |a — 9 0 1. 
Therefore, it yields that 
dLi(a,b) 9i — 9 0 


da 


(9 1 -0 o )(b-a) 

2 a 2 

(9 1 -9 0 )(b-a) 


(' ape 0 (a ) + bpg 0 (b)) 


0 9\~9l) 

2a 2 


(j>e 0 {a) +PeA h )) 


(w 0 (“) - P8o(b)) 


(46) 


2 a 3 




a - 9c 




b-9 , 


a 


> 0 , 


which implies that Li(a,b) is an increasing function of a. 

Considering the constraints of the problem Rg f R, it 
follows that a f a*. Therefore, L-\ (a. b) is maximized when 
a = a* and b = b*. 


By ( |45[ >, we obtain that: 

(0 2 - 9l)R 9 1 - 0 O 


£ 1 ( 0 *, 6*) = 


2 cr 2 


' (—,00) 


ype 0 {y)dy. 


The proof is completed. 
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